Javascript stories
Enterprises running AI agents can now cut infrastructure overhead, as MongoDB adds automated embeddings, memory and faster database performance.
Organisations using AI in software development will get training on secure coding and governance as vulnerabilities and data risks mount.
Detection of malicious code can collapse when AI reviewers are fed large files packed with harmless text, Cloudflare's research shows.
Hundreds of packages could have exposed API keys and logins after Claude Code saved approved commands in a file npm may publish by default.
A shortage of experienced coders is putting pressure on teams maintaining mission-critical web systems as most PHP users plan upgrades.
Broad exposure across thousands of applications is feared after Google tied the axios npm supply chain attack to suspected North Korean hackers.
Google has launched Antigravity, a full-stack coding agent in AI Studio that turns text prompts into collaborative, production-ready web apps.
Malicious fake Windsurf IDE extension hid JavaScript, abused Solana to fetch payloads, and stole developers' browser credentials and tokens.
Ransomware group LeakNet adopts ClickFix lures and a Deno-based fileless loader to scale attacks and evade traditional endpoint defences.
Okta and partners pull rogue ShieldGuard Chrome extension that stole crypto wallet data and bypassed browser defences via custom code.
Chainguard expands its rebuilt-from-source Libraries to Python, Java and JavaScript, targeting malware risks in AI-driven software supply chains.
Meta hands React and React Native to a new Linux Foundation-backed React Foundation, promising neutral, community-led governance.
ActiveState launches a 79m-component secure open source catalogue to centralise software supply chains and cut enterprise vulnerability risk.
Developers granting AI agents broad, unsupervised access to code and systems are creating new software supply chain and data exposure risks.
OpenSilver 3.3 lets developers embed native Blazor components in XAML apps, uniting WPF-style UI with the Blazor ecosystem.
Cloudflare snaps up the Astro web framework, vowing to keep it open source while tying it closer to its performance and developer platform.
WiseTech pledges AUD $8.7 million to keep Grok Academy's coding platform free for every school and student in Australia and New Zealand.
Intruder finds over 42,000 sensitive tokens hidden in JavaScript bundles, exposing a major blind spot in modern web app security tools.
MODLR has added a Visual Scripting Engine to its CPM platform, letting finance and operations teams build no-code data workflows.
MongoDB bakes Voyage 4 AI models into Atlas and automates vector search, targeting scalable, production-grade retrieval applications.
